Supply Chain Incidents

MAL-2026-11099

Malicious code in demo-awesome-date-parser-test (npm)

MAL-2026-11095

Malicious code in @array-util/subsearch (npm)

MAL-2026-11104

Malicious code in tailwind-motionkit (npm)

MAL-2026-11087

Malicious code in kalipto-runtime (npm)

MAL-2026-11078

Malicious code in @thone33/react-helpers (npm)

MAL-2026-11083

Malicious code in edu-npm-helper-beta (npm)

MAL-2026-11082

Malicious code in edu-npm-helper-alpha (npm)

MAL-2026-11089

Malicious code in txs-builder (npm)

MAL-2026-11091

Malicious code in txs-runner-lib (npm)

MAL-2026-11090

Malicious code in txs-random-lib (npm)

MAL-2026-11092

Malicious code in txs-sdk-lib (npm)

MAL-2026-11079

Malicious code in @vinnxcode/libsignal-node (npm)

MAL-2026-11088

Malicious code in sixbails (npm)

MAL-2026-11080

Malicious code in @vinnxcode/xbailsync (npm)

MAL-2026-11081

Malicious code in amanexzyra-baileys (npm)

MAL-2026-11085

Malicious code in fazzanime (npm)

MAL-2026-11086

Malicious code in fazzgram (npm)

MAL-2026-11073

Malicious code in @fazzcode/baileys (npm)

MAL-2026-11076

Malicious code in @sqlite-tag/schema-generator (npm)

MAL-2026-11077

Malicious code in @sqlite-tag/sql-creator (npm)

MAL-2026-11075

Malicious code in @sqlite-frame/createsql (npm)

MAL-2026-11074

Malicious code in @my_name_is_khn/express-security-tool-v2 (npm)

MAL-2026-11084

Malicious code in express-self-destruct1 (npm)

MAL-2026-11066

Malicious code in @ks-radar/radar (npm)